syzbot


WARNING in vkms_gem_free_object
Status: upstream: reported C repro on 2019/10/14 02:49
Reported-by: syzbot+e7ad70d406e74d8fc9d0@syzkaller.appspotmail.com
First crash: 958d, last: 592d

Cause bisection: introduced by (bisect log) :
commit 94e2ec3f7fef86506293a448273b2b4ee21e6195
Author: Oleg Vasilev <omrigann@gmail.com>
Date: Mon Sep 30 15:59:24 2019 +0000

  drm/vkms: prime import support

Crash: WARNING in vkms_gem_free_object (log)
Repro: C syz .config

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 9404 at drivers/gpu/drm/vkms/vkms_gem.c:37 vkms_gem_free_object+0x92/0xb0 drivers/gpu/drm/vkms/vkms_gem.c:37
Kernel panic - not syncing: panic_on_warn set ...
CPU: 1 PID: 9404 Comm: syz-executor903 Not tainted 5.5.0-rc2-next-20191218-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x197/0x210 lib/dump_stack.c:118
 panic+0x2e3/0x75c kernel/panic.c:221
 __warn.cold+0x2f/0x3e kernel/panic.c:582
 report_bug+0x289/0x300 lib/bug.c:195
 fixup_bug arch/x86/kernel/traps.c:174 [inline]
 fixup_bug arch/x86/kernel/traps.c:169 [inline]
 do_error_trap+0x11b/0x200 arch/x86/kernel/traps.c:267
 do_invalid_op+0x37/0x50 arch/x86/kernel/traps.c:286
 invalid_op+0x23/0x30 arch/x86/entry/entry_64.S:1027
RIP: 0010:vkms_gem_free_object+0x92/0xb0 drivers/gpu/drm/vkms/vkms_gem.c:37
Code: a4 08 24 fd 49 8d bc 24 00 02 00 00 e8 d7 c6 08 fd 4c 89 e7 e8 5f 0d aa ff 4c 89 e7 e8 27 a3 61 fd 41 5c 5d c3 e8 7e 08 24 fd <0f> 0b eb a2 e8 75 08 24 fd 0f 0b eb c8 e8 7c f2 61 fd eb b6 e8 75
RSP: 0018:ffffc90001f979f0 EFLAGS: 00010293
RAX: ffff8880a6468440 RBX: ffffffff8a00c540 RCX: ffffffff83fb6567
RDX: 0000000000000000 RSI: ffffffff845144e2 RDI: ffff8880a0121280
RBP: ffffc90001f979f8 R08: ffff8880a6468440 R09: ffffed1014024201
R10: ffffed1014024200 R11: ffff8880a0121003 R12: ffff8880a0121000
R13: ffff8880a271c000 R14: ffffffff84514450 R15: ffff8880a271c020
 drm_gem_object_free+0x100/0x220 drivers/gpu/drm/drm_gem.c:983
 kref_put include/linux/kref.h:65 [inline]
 drm_gem_object_put_unlocked drivers/gpu/drm/drm_gem.c:1017 [inline]
 drm_gem_object_put_unlocked+0x196/0x1c0 drivers/gpu/drm/drm_gem.c:1002
 drm_gem_object_handle_put_unlocked+0x1ad/0x2d0 drivers/gpu/drm/drm_gem.c:239
 drm_gem_object_release_handle+0x102/0x1c0 drivers/gpu/drm/drm_gem.c:261
 idr_for_each+0x138/0x250 lib/idr.c:208
 drm_gem_release+0x27/0x40 drivers/gpu/drm/drm_gem.c:939
 drm_file_free.part.0+0x7f4/0xc00 drivers/gpu/drm/drm_file.c:246
 drm_file_free drivers/gpu/drm/drm_file.c:215 [inline]
 drm_close_helper drivers/gpu/drm/drm_file.c:273 [inline]
 drm_release+0x286/0x3f0 drivers/gpu/drm/drm_file.c:445
 __fput+0x2ff/0x890 fs/file_table.c:280
 ____fput+0x16/0x20 fs/file_table.c:313
 task_work_run+0x145/0x1c0 kernel/task_work.c:113
 exit_task_work include/linux/task_work.h:22 [inline]
 do_exit+0x909/0x2f20 kernel/exit.c:797
 do_group_exit+0x135/0x360 kernel/exit.c:895
 __do_sys_exit_group kernel/exit.c:906 [inline]
 __se_sys_exit_group kernel/exit.c:904 [inline]
 __x64_sys_exit_group+0x44/0x50 kernel/exit.c:904
 do_syscall_64+0xfa/0x790 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x442bb8
Code: Bad RIP value.
RSP: 002b:00007ffc6a0e9a68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000442bb8
RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000
RBP: 00000000004c24c8 R08: 00000000000000e7 R09: ffffffffffffffd0
R10: 00000000004002e0 R11: 0000000000000246 R12: 0000000000000001
R13: 00000000006d41a0 R14: 0000000000000000 R15: 0000000000000000
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (1029):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-linux-next-kasan-gce-root 2019/12/18 11:07 linux-next b9c5ef25038d f2fe0772 .config log report syz C
ci-upstream-linux-next-kasan-gce-root 2019/11/05 23:58 linux-next 51309b9d73f5 0f3ec414 .config log report syz C
ci-upstream-linux-next-kasan-gce-root 2019/10/12 04:52 linux-next 8ada228ac7ed 426631dd .config log report syz C
ci-upstream-kasan-gce 2020/10/12 05:36 upstream 3dd0130f2430 4a77ae0b .config log report info
ci-upstream-kasan-gce 2020/10/10 05:56 upstream 6f2f486d57c4 93817d89 .config log report info
ci-upstream-kasan-gce 2020/10/09 10:13 upstream 3d006ee42dde 92390980 .config log report info
ci-upstream-kasan-gce-smack-root 2020/10/09 08:38 upstream 3d006ee42dde 92390980 .config log report info
ci-upstream-kasan-gce 2020/10/08 19:29 upstream c85fb28b6f99 92390980 .config log report info
ci-upstream-kasan-gce 2020/10/04 22:13 upstream 22fbc037cd32 5ef9c291 .config log report info
ci-upstream-kasan-gce 2020/10/04 18:04 upstream 22fbc037cd32 5ef9c291 .config log report info
ci-upstream-kasan-gce 2020/09/30 20:31 upstream 02de58b24d2e 8516f6d3 .config log report info
ci-upstream-kasan-gce-root 2020/09/30 17:43 upstream 02de58b24d2e 8516f6d3 .config log report info
ci-upstream-kasan-gce-selinux-root 2020/09/30 01:52 upstream ccc1d052eff9 5abc3f1a .config log report info
ci-upstream-kasan-gce 2020/09/30 00:05 upstream ccc1d052eff9 5abc3f1a .config log report info
ci-upstream-kasan-gce-smack-root 2020/09/29 15:02 upstream fb0155a09b02 1b88c6d5 .config log report info
ci-upstream-kasan-gce-selinux-root 2020/09/26 21:37 upstream 7c7ec3226f5f 2d5ea0cb .config log report info
ci-upstream-kasan-gce-smack-root 2020/09/25 10:51 upstream 171d4ff79f96 54289b08 .config log report info
ci-upstream-kasan-gce 2020/09/24 13:21 upstream c9c9e6a49f89 54289b08 .config log report info
ci-upstream-kasan-gce-smack-root 2020/09/24 07:08 upstream c9c9e6a49f89 54289b08 .config log report info
ci-upstream-kasan-gce 2020/09/23 18:11 upstream 805c6d3c1921 287cd75a .config log report info
ci-upstream-kasan-gce 2020/09/22 12:56 upstream 98477740630f 9e1fa68e .config log report info
ci-upstream-kasan-gce 2020/09/12 19:52 upstream 729e3d091984 ce441f06 .config log report
ci-upstream-kasan-gce-smack-root 2020/09/11 15:58 upstream 581cb3a26baf adfb8b4e .config log report
ci-upstream-kasan-gce-selinux-root 2020/09/09 17:50 upstream 34d4ddd359db 0ea7a887 .config log report
ci-upstream-kasan-gce-smack-root 2020/09/09 05:18 upstream 6f6a73c8b715 abf9ba4f .config log report
ci-upstream-kasan-gce 2020/09/09 01:56 upstream 612ab8ad6414 abf9ba4f .config log report
ci-upstream-kasan-gce 2020/09/08 13:15 upstream f4d51dffc6c0 abf9ba4f .config log report
ci-upstream-kasan-gce-root 2020/09/08 00:24 upstream f4d51dffc6c0 abf9ba4f .config log report
ci-upstream-kasan-gce-root 2020/09/07 14:28 upstream f4d51dffc6c0 abf9ba4f .config log report
ci-upstream-kasan-gce-selinux-root 2020/09/07 06:58 upstream f4d51dffc6c0 abf9ba4f .config log report
ci-upstream-kasan-gce 2020/09/06 23:27 upstream dd9fb9bb3340 abf9ba4f .config log report
ci-upstream-kasan-gce 2020/09/06 00:16 upstream 9322c47b21b9 abf9ba4f .config log report
ci-upstream-kasan-gce 2020/09/03 15:34 upstream fc3abb53250a abf9ba4f .config log report
ci-upstream-kasan-gce-smack-root 2020/09/02 00:28 upstream b765a32a2e91 abf9ba4f .config log report
ci-upstream-kasan-gce-root 2020/09/01 03:44 upstream f75aef392f86 d5a3ae1f .config log report
ci-upstream-kasan-gce-smack-root 2020/09/01 02:43 upstream f75aef392f86 d5a3ae1f .config log report
ci-upstream-kasan-gce 2020/08/31 06:19 upstream dcc5c6f013d8 d5a3ae1f .config log report
ci-upstream-kasan-gce 2020/08/30 22:25 upstream 1127b219ce94 d5a3ae1f .config log report
ci-upstream-kasan-gce-smack-root 2020/08/30 20:02 upstream 1127b219ce94 d5a3ae1f .config log report
ci-qemu-upstream 2020/01/12 18:54 upstream 040a3c33623b 53faa9fe .config log report
ci-upstream-kasan-gce-386 2020/10/12 02:32 upstream 3dd0130f2430 4a77ae0b .config log report info
ci-upstream-kasan-gce-386 2020/10/07 05:59 upstream c85fb28b6f99 1880b4a9 .config log report info
ci-upstream-kasan-gce-386 2020/10/01 03:40 upstream 02de58b24d2e 8516f6d3 .config log report info
ci-upstream-kasan-gce-386 2020/09/12 18:15 upstream 729e3d091984 ce441f06 .config log report
ci-upstream-kasan-gce-386 2020/09/12 07:29 upstream e8878ab82545 79fb24e2 .config log report
ci-upstream-kasan-gce-386 2020/09/08 09:07 upstream f4d51dffc6c0 abf9ba4f .config log report
ci-upstream-kasan-gce-386 2020/09/07 13:03 upstream f4d51dffc6c0 abf9ba4f .config log report
ci-upstream-kasan-gce-386 2020/09/04 13:54 upstream e28f0104343d abf9ba4f .config log report
ci-upstream-kasan-gce-386 2020/09/03 22:39 upstream fc3abb53250a abf9ba4f .config log report
ci-upstream-kasan-gce-386 2020/09/01 18:44 upstream b51594df17d0 d5a3ae1f .config log report
ci-upstream-kasan-gce-386 2020/08/31 10:23 upstream dcc5c6f013d8 d5a3ae1f .config log report
ci-qemu-upstream-386 2020/01/13 07:11 upstream 040a3c33623b 53faa9fe .config log report
ci-upstream-linux-next-kasan-gce-root 2020/09/22 23:51 linux-next e64997027d5f 3e8f6c27 .config log report info
ci-upstream-linux-next-kasan-gce-root 2020/09/22 08:38 linux-next b10b8ad86211 9e1fa68e .config log report info
ci-upstream-linux-next-kasan-gce-root 2020/09/01 06:51 linux-next b36c969764ab d5a3ae1f .config log report
ci-upstream-linux-next-kasan-gce-root 2020/08/31 18:45 linux-next b36c969764ab d5a3ae1f .config log report
ci-upstream-linux-next-kasan-gce-root 2020/08/30 14:45 linux-next b36c969764ab d5a3ae1f .config log report
ci-upstream-linux-next-kasan-gce-root 2020/08/30 08:46 linux-next b36c969764ab d5a3ae1f .config log report